在 spring 中，通过 Resttemplate 发出的每个请求发送客户端证书的正确方法是什么？

我想通过我的 Spring 应用程序使用 REST 服务。为了访问该服务，我有一个客户端证书（自签名且为 .jks 格式）用于授权。 针对其余服务进行身份验证的正确方法是什么？

这是我的要求：

public List<Info> getInfo() throws RestClientException, URISyntaxException {

    HttpEntity<?> httpEntity = new HttpEntity<>(null, new HttpHeaders());

    ResponseEntity<Info[]> resp = restOperations.exchange(
            new URI(BASE_URL + "/Info"), HttpMethod.GET, 
            httpEntity, Info[].class);
    return Arrays.asList(resp.getBody());
}

这是如何使用以下示例执行此操作休息模板 https://docs.spring.io/spring/docs/current/javadoc-api/org/springframework/web/client/RestTemplate.html and Apache HttpClient https://hc.apache.org/httpcomponents-client-ga/httpclient/apidocs/

你应该定义你自己的RestTemplate配置 SSL 上下文：

@Bean
public RestTemplate restTemplate(RestTemplateBuilder builder) throws Exception {
    char[] password = "password".toCharArray();

    SSLContext sslContext = SSLContextBuilder.create()
            .loadKeyMaterial(keyStore("classpath:cert.jks", password), password)
            .loadTrustMaterial(null, new TrustSelfSignedStrategy()).build();

    HttpClient client = HttpClients.custom().setSSLContext(sslContext).build();
    return builder
            .requestFactory(new HttpComponentsClientHttpRequestFactory(client))
            .build();
}

 private KeyStore keyStore(String file, char[] password) throws Exception {
    KeyStore keyStore = KeyStore.getInstance("PKCS12");
    File key = ResourceUtils.getFile(file);
    try (InputStream in = new FileInputStream(key)) {
        keyStore.load(in, password);
    }
    return keyStore;
}

现在，此模板执行的所有远程调用都将被签名cert.jks. Note: 你需要把cert.jks进入你的类路径

@Autowired
private RestTemplate restTemplate;

public List<Info> getInfo() throws RestClientException, URISyntaxException {
    HttpEntity<?> httpEntity = new HttpEntity<>(null, new HttpHeaders());

    ResponseEntity<Info[]> resp = restTemplate.exchange(
            new URI(BASE_URL + "/Info"), HttpMethod.GET, 
            httpEntity, Info[].class);
    return Arrays.asList(resp.getBody());
}